General
- Target 2026-07-02_02b615eacdc6cdfd7482f44775a9a003_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- Sample260702-pbecysf15k
- SHA256 f1477de3073556f0266b8cd81c04a51dbccbee243ca4cb7568b92d8552321b47
- MD5 02b615eacdc6cdfd7482f44775a9a003
- SHA1 eaf727414a61c8e52c7dd0c34befb073ed7b245b
- SHA512 f215008af9b45f124ea2554fbeb9785467167a09d8acfd1c0153c16b9021896c47911614bfaccc9d93632585add7a3de5399ebff58bf5d5a8288bc32ef99d1a4
- SSDEEP 49152:WWJE2ZctEafitmGYj+uYP4D2VPrXLOHK9rshP9t49AmT:LE2ZBaqaj+uYP4sr7o2sqv
- TLSH T1AC95230171D5C0B4EAF71B35A875C5A04AB4FC305D214ADF63C87D391EB8A80E979BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_02b615eacdc6cdfd7482f44775a9a003_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_02b615eacdc6cdfd7482f44775a9a003_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- SHA256 f1477de3073556f0266b8cd81c04a51dbccbee243ca4cb7568b92d8552321b47
- MD5 02b615eacdc6cdfd7482f44775a9a003
- SHA1 eaf727414a61c8e52c7dd0c34befb073ed7b245b
- SHA512 f215008af9b45f124ea2554fbeb9785467167a09d8acfd1c0153c16b9021896c47911614bfaccc9d93632585add7a3de5399ebff58bf5d5a8288bc32ef99d1a4
- SSDEEP 49152:WWJE2ZctEafitmGYj+uYP4D2VPrXLOHK9rshP9t49AmT:LE2ZBaqaj+uYP4sr7o2sqv
- TLSH T1AC95230171D5C0B4EAF71B35A875C5A04AB4FC305D214ADF63C87D391EB8A80E979BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1